Privacy Policy

1. Introduction

Waja Law ("we", "us", "our") is committed to protecting the personal data of individuals who visit this website or contact us in connection with our legal services. This Privacy Policy explains how we collect, use, store and protect personal data in compliance with the Personal Data Protection Act 2010 (PDPA) of Malaysia.

If you have questions about this policy, please contact us at [email protected].

2. Data We Collect

We may collect the following categories of personal data:

• Name, email address, and telephone number provided through our contact form or by email
• Business name and role, where provided voluntarily
• Details of the matter you wish to discuss, as described in your message
• Technical data: IP address, browser type, pages visited, and time of visit (collected automatically via website analytics)
• Cookie data, as described in our Cookie Policy

We do not collect sensitive personal data (such as financial account details, health information, or identification numbers) through this website.

3. How We Collect Data

• Contact form: when you submit an enquiry through the website
• Email correspondence: when you contact us directly
• Telephone: when you call our office
• Cookies and analytics: automatically when you browse the website

Legal basis for processing: we process personal data on the basis of your consent (where given), our legitimate interest in responding to enquiries and administering the practice, and where necessary to fulfil a legal obligation.

Retention: enquiry data is retained for 24 months from the date of last contact, unless a matter proceeds to engagement, in which case it is retained in accordance with our file retention policy (typically 7 years from file closure, in accordance with Bar Council guidance).

4. How We Use Your Data

• To respond to your enquiry and assess whether we can assist
• To communicate with you regarding your matter, if you become a client
• To comply with our legal and regulatory obligations under the Legal Profession Act 1976
• To improve the website through aggregated, anonymised analytics

We do not use your data for direct marketing purposes. We do not sell or rent personal data to third parties.

5. Data Sharing

We may share personal data with:

• Third-party experts: quantity surveyors, delay analysts or other consultants engaged on your matter, where relevant and with your knowledge
• Courts and adjudication bodies: where required by proceedings (AIAC, High Court)
• Professional indemnity insurers: where a claim or complaint arises
• Service providers: website hosting and email providers, bound by appropriate data processing terms

We do not transfer personal data outside Malaysia except where required for international arbitration proceedings or with your explicit consent.

6. Data Protection Measures

• Secure email communication for sensitive matter documents
• Access to client files restricted to relevant personnel only
• Physical files stored in locked, access-controlled premises
• Electronic data backed up to secure storage
• Incident response procedure in place for data breaches

In the event of a data breach that is likely to result in significant harm, we will notify affected individuals and the relevant authority in accordance with the PDPA.

7. Cookies

This website uses cookies to support basic functionality and to collect anonymised analytics data. Please refer to our Cookie Policy for full details, including how to manage your cookie preferences.

8. Your Rights Under the PDPA

Under the Personal Data Protection Act 2010, you have the right to:

• Access the personal data we hold about you
• Request correction of inaccurate or incomplete data
• Withdraw consent to processing (where processing is based on consent)
• Request that we limit processing of your data in certain circumstances
• Lodge a complaint with the Department of Personal Data Protection Malaysia

To exercise any of these rights, please contact us at [email protected]. We will respond within 21 days.

9. Third-Party Links

This website may contain links to external sites. We are not responsible for the privacy practices of third-party websites. We recommend reviewing the privacy policy of any external site before providing personal data to it.

10. Children's Privacy

Our services are directed to businesses and individuals engaged in commercial construction matters. We do not knowingly collect personal data from persons under 18 years of age. If you believe we have inadvertently collected such data, please contact us and we will delete it promptly.

11. Changes to This Policy

We may update this Privacy Policy from time to time. The "Last Updated" date at the top of this page reflects the most recent revision. Continued use of the website after changes constitutes acceptance of the revised policy.

12. Contact

Data Controller: Waja Law
Suite 2-2, Tamarind Square, Persiaran Multimedia, 63000 Cyberjaya, Selangor
Email: [email protected]
Phone: +60 3 8312 6587